Using Populations and Groups

Groups and Populations are used to apply actions in IdentityIQ to specific sets of Identities, rather than to every Identity in the system. They can be used in these areas:

  • Filters on Identity Refresh and Policy Scan Tasks

  • Advanced and Targeted Certification selection criteria

  • Advanced Analytics: Access Review and Activity Search query criteria

  • Report Filters

  • IT Role Mining Filters

Using Populations or Groups as filters for these activities makes it possible to run these queries and processes for select sets of Identities, allowing for targeted data analysis and more efficient system processing.

Populations and Groups can be used as filters on Identity Refresh and Policy Scan tasks. These include all custom tasks created based on the Identity Refresh and Policy Scan task templates.

Advanced and Targeted Certifications can generate Access Reviews for specific Populations. Advanced Certifications can also generate Access Reviews for specific Groups. In Advanced Certifications, Population(s) or Group(s) are selected in the What to Certify section of the Basic page. In Targeted Certifications, Populations are selected in the Who to Certify section.

Two of the Advanced Analytics query types allow Populations to be used as search criteria: Access Review Search and Activity Search. The Access Review Search filter results in inclusion of only Access Reviews that were generated for the specified Population or Group. The Activity Search only allows Populations (not Groups) to be used as a filter limits the returned set of Identities to ones that are part of the selected Population.

Populations and Groups can be used as filters on several of the preconfigured IdentityIQ reports, including the Advanced Access Review Report, the Identity Effective Access Report, the Identity Risk Report, and the Identity Role Report. The Advanced Access Review Report filter means the report is run only for Access Reviews created for the selected Population or Group. For the other reports, the filter allows only Identities that are part of the selected Population or Group to be included on the report.

Populations can be used as Identity selection criteria for IT Role Mining activities. Groups cannot be used for IT Role Mining.